If you are a HIPAA covered entity (CE) you are likely aware of HIPAA patient rights as well as your obligation to present patients with a Notice of Privacy Practices (NPP) where these rights are identified. Our overview post on the HIPAA Privacy Rule identified four areas that must be included in your NPP. Under the HIPAA Privacy Rule patients have rights (See 45 CF164.520). So what are the rights that must be included in your NPP at your therapy practice?
HIPAA Patient Rights
The Model NPP identifies the following required elements. Your NPP is telling your patients that they have a right to:
- Get a copy of their paper or electronic medical record
- Correct their paper or electronic medical record
- Request confidential communication
- Ask (provider) to limit the information they share
- Get a list of those with whom information has been shared
- Get a copy of the privacy notice (NPP)
- Choose someone to act in their behalf
- File a complaint if they believe their privacy rights have been violated
HIPAA Patient Rights – Is Your NPP Up to Date?
Nancy J. Beckley MS, MBA, CHC: President-Nancy Beckley & Associates LLC. Compliance outsourcing, risk assessment, compliance plans, compliance training, auditing, due diligence, investigation support for therapy providers.